$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: lw8WjKa9s+/3YnCB+gzqA/rI5vDio0TKlYDA6xnlApc= Subject key identifier: 5B:3F:26:AC:B4:8E:86:EF:65:D0:63:FA:A6:B1:F2:61:33:E8:DE:C3 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D237A320EDF4265047A4122C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:32:0e:df:42:65:04:7a:41:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=27dac4a0-b138-4d35-ae4f-6a501c78e6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:00:30:8a:c2:f0:6e:4c:e7:fa:45:68:c2: fa:56:0d:51:b4:fb:04:02:3d:94:85:85:dc:34:b6: 82:cc:0e:29:28:31:4f:9a:7e:ba:87:22:41:14:9c: 1b:5f:f9:06:65:16:08:1a:f8:fc:f3:a2:2b:7d:e8: 2c:ca:3e:de:7e:6a:51:5c:01:ba:ea:e5:ed:e5:78: 6d:5e:61:14:7d:4d:b6:76:c1:55:72:c2:1c:84:a7: 35:21:86:73:d7:1e:d6:0a:fd:d2:08:43:dd:ba:a8: 82:52:e7:f3:d6:6c:d3:f2:8c:1e:2d:b2:4a:ad:12: 1f:8a:de:10:22:f6:61:9d:d3:20:be:5e:c5:18:e7: 39:99:c7:d0:cd:f5:2d:5d:87:24:fe:b1:44:0c:66: 96:05:31:41:ef:ec:ba:2f:9c:e3:59:be:f0:8f:ad: e5:f4:16:b0:3f:ec:0f:f1:a9:73:26:f1:45:2c:cc: 43:a8:24:65:f0:cd:5c:ac:33:d4:11:9e:05:a6:28: 02:90:ec:27:5a:8c:15:1a:73:a4:08:22:02:00:c2: 74:0a:ae:a2:34:6f:94:f8:d1:8c:76:3e:bd:53:37: de:ba:b1:e1:df:56:80:be:84:b7:46:ff:08:a7:b2: cb:10:2b:96:5b:ba:c4:bd:3d:e2:94:7b:78:f5:3f: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:26:AC:B4:8E:86:EF:65:D0:63:FA:A6:B1:F2:61:33:E8:DE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:67:eb:a4:a3:af:e9:a6:9a:4f:e9:cb:40:df:bb:cc:46:11: 0e:3d:a7:4e:a6:88:1a:c7:cb:0f:a3:c4:e9:bc:98:e7:13:ea: cd:76:cd:e1:5c:18:6e:fb:a1:d5:1f:1f:ac:02:b9:42:c1:1a: d2:11:24:22:b3:39:9d:3e:19:e5:45:a1:f7:b8:c1:79:08:1e: 1a:f6:1f:a2:f9:c5:27:f1:90:a7:21:59:2e:ab:7a:09:aa:61: a0:2e:90:19:aa:25:d4:7b:9d:1c:23:b2:84:b7:13:52:24:e9: 7c:45:b5:f0:a4:7b:86:5e:d6:19:1f:53:a4:44:d8:de:1a:4b: 5e:b0:e9:44:04:e2:81:3f:05:5c:a1:19:30:f4:14:d8:02:e0: 7c:f0:b2:76:0d:be:53:06:2d:6d:fc:df:4a:f9:18:92:84:f3: e7:52:de:f6:7e:a4:09:81:3a:d5:31:ab:12:ca:ab:a6:3b:94: bd:c4:69:12:97:1b:77:67:78:54:45:f1:67:e2:db:51:23:b3: ba:98:69:0c:6f:36:fa:66:d1:6e:7b:9e:9a:37:75:8a:af:a0: 8b:1e:bd:14:73:b9:11:25:fa:f6:07:57:47:b6:a6:a4:16:e8: d6:85:cc:d4:92:1b:56:34:1e:6c:20:48:a7:db:83:23:92:c9: 48:7f:fe:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejIO30JlBHpBIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjdkYWM0YTAtYjEzOC00ZDM1LWFlNGYtNmE1MDFjNzhlNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3EAMIrC8G5M5/pFaML6Vg1RtPsEAj2UhYXc NLaCzA4pKDFPmn66hyJBFJwbX/kGZRYIGvj886Irfegsyj7efmpRXAG66uXt5Xht XmEUfU22dsFVcsIchKc1IYZz1x7WCv3SCEPduqiCUufz1mzT8oweLbJKrRIfit4Q IvZhndMgvl7FGOc5mcfQzfUtXYck/rFEDGaWBTFB7+y6L5zjWb7wj63l9BawP+wP 8alzJvFFLMxDqCRl8M1crDPUEZ4FpigCkOwnWowVGnOkCCICAMJ0Cq6iNG+U+NGM dj69UzfeurHh31aAvoS3Rv8Ip7LLECuWW7rEvT3ilHt49T98uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs/Jqy0jobvZdBj+qax8mEz6N7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADln66Sjr+mmmk/py0Dfu8xGEQ49p06miBrHyw+jxOm8mOcT6s12zeFc GG77odUfH6wCuULBGtIRJCKzOZ0+GeVFofe4wXkIHhr2H6L5xSfxkKchWS6regmq YaAukBmqJdR7nRwjsoS3E1Ik6XxFtfCke4Ze1hkfU6RE2N4aS16w6UQE4oE/BVyh GTD0FNgC4HzwsnYNvlMGLW3830r5GJKE8+dS3vZ+pAmBOtUxqxLKq6Y7lL3EaRKX G3dneFRF8Wfi21Ejs7qYaQxvNvpm0W57npo3dYqvoIsevRRzuREl+vYHV0e2pqQW 6NaFzNSSG1Y0HmwgSKfbgyOSyUh//u4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:31 2026 by rpki-client